Dynamics RLS rules conflict

Hello

I have tried to provide a rudementary example of a data model to describle the scenario, below.

In short, we have implemented dynamics RLS.

Each role works individually, but when I enable both they conflict as there is effectively an overlap.

The problem / access I am trying to solve is that a user should only be able to see data for their businessunit but effectively two different ways, they can see:

1. any opportunity data owned by their business unit and any invoices related to these opportunities, AND

2. all invoices owned by their business unit and any opportunities relating to those invoices

As mentioned, I have created roles that individually work, but due to the relationship between opportunities and invoices, the filters once both enabled effectively create an error.

I presume the only way to address this is some form of DAX formula, but I don't know how.

I can confirm that I can create static RLS for the scenarios, and apply the two static roles per business unit, but as there are around 30 business units, two roles each, and hundreds of potential users it's an exceptional admin overhead to manage.

Any thoughts or recomendations would be much appreciated.

Thank you.